views:

163

answers:

3

My iPhone app uses SHA1 for password security over an instant messaging protocol.

Will I be required to declare my app as "containing encryption" when I submit it to Apple's review process?

A: 

I would think you should declare the use of encryption functions.

The purpose of declaring it is that applications using encryption cannot be exported from some specific countries, or imported in some countries. Just to make an example, such applications cannot be exported from the United States of America, as they are considered as much as arms. I don't see any other reasons why Apple would ask you to declare when an application uses encryption.

kiamlaluno
Cryptography was once considered to be a military technology. But, these times are long over. Export restrictions have changed accordingly. See for example http://en.wikipedia.org/wiki/Export_of_cryptography.
abc
Many regimes restrict the import of cryptographic software. Authoritarian repression is alive and well.
erickson
+2  A: 

A cryptographic hash function is not encryption. If Apple's wording is actually "encryption", you should definitely answer no.

erickson
+5  A: 

If you say yes to that question, it will then ask you if you use it for anything other than authentication. In your case, you can answer no and proceed to submit your app as normal.

Rudedog
Thanks, exactly what I needed to know.
Jasarien